110 	__m128i tmp2, tmp3, tmp4, tmp5, tmp6, tmp7, tmp8, tmp9;  in gfmul()  local
114 	tmp5 = _mm_clmulepi64_si128(a, b, 0x01);  in gfmul()
117 	tmp4 = _mm_xor_si128(tmp4, tmp5);  in gfmul()
118 	tmp5 = _mm_slli_si128(tmp4, 8);  in gfmul()
120 	tmp3 = _mm_xor_si128(tmp3, tmp5);  in gfmul()
147 	tmp5 = _mm_srli_epi32(tmp3, 7);  in gfmul()
149 	tmp2 = _mm_xor_si128(tmp2, tmp5);  in gfmul()
168 	__m128i tmp4, tmp5, tmp6, tmp7;  in reduce4()  local
194 	tmp5 = _mm_shuffle_epi32(X2, 78);  in reduce4()
196 	tmp5 = _mm_xor_si128(tmp5, X2);  in reduce4()
207 	tmp1 = _mm_clmulepi64_si128(tmp1, tmp5, 0x00);  in reduce4()
250 	tmp5 = _mm_srli_epi32(tmp3, 7);  in reduce4()
252 	tmp2 = _mm_xor_si128(tmp2, tmp5);  in reduce4()
276 	__m128i tmp5, tmp6, tmp7, tmp8;  in AES_GCM_encrypt()  local
394 		tmp5 = _mm_shuffle_epi8(ctr5, BSWAP_EPI64);  in AES_GCM_encrypt()
412 		tmp5 =_mm_xor_si128(tmp5, KEY[0]);  in AES_GCM_encrypt()
422 			tmp5 = _mm_aesenc_si128(tmp5, KEY[j]);  in AES_GCM_encrypt()
431 		tmp5 =_mm_aesenclast_si128(tmp5, KEY[nr]);  in AES_GCM_encrypt()
444 		tmp5 = _mm_xor_si128(tmp5,  in AES_GCM_encrypt()
457 		_mm_storeu_si128(&((__m128i*)out)[i*8+4], tmp5);  in AES_GCM_encrypt()
466 		tmp5 = _mm_shuffle_epi8(tmp5, BSWAP_MASK);  in AES_GCM_encrypt()
475 		tmp5 = _mm_xor_si128(X, tmp5);  in AES_GCM_encrypt()
476 		reduce4(H, H2, H3, H4, tmp8, tmp7, tmp6, tmp5, &X);  in AES_GCM_encrypt()
537 	__m128i tmp5, tmp6, tmp7, tmp8;  in AES_GCM_decrypt()  local
699 		tmp5 = _mm_shuffle_epi8(ctr5, BSWAP_EPI64);  in AES_GCM_decrypt()
717 		tmp5 =_mm_xor_si128(tmp5, KEY[0]);  in AES_GCM_decrypt()
727 			tmp5 = _mm_aesenc_si128(tmp5, KEY[j]);  in AES_GCM_decrypt()
736 		tmp5 =_mm_aesenclast_si128(tmp5, KEY[nr]);  in AES_GCM_decrypt()
749 		tmp5 = _mm_xor_si128(tmp5,  in AES_GCM_decrypt()
762 		_mm_storeu_si128(&((__m128i*)out)[i*8+4], tmp5);  in AES_GCM_decrypt()
771 		tmp5 = _mm_shuffle_epi8(tmp5, BSWAP_MASK);  in AES_GCM_decrypt()